Surge for Mac and iOS
The network toolbox for power users.
Surge takes over the traffic on your Mac and iPhone, routes every request by rules you write, and shows you exactly what each app sends.
Free for 7 days with every feature. No credit card needed.
Surge for Mac
One app, three jobs.
A proxy client that follows your rules
Route each request by domain, IP range, GeoIP, ASN, process, protocol, or port. Forward it over HTTP/2 CONNECT, MASQUE, Shadowsocks, Trojan, Snell, Hysteria 2, WireGuard, Tailscale, and more.
A toolkit for your whole network
Enhanced Mode captures traffic from every app, proxy-aware or not. Gateway Mode serves the other devices on your LAN. Encrypted DNS and Surge Ponte come built in.
An HTTP debugger
Watch requests live in Dashboard, decrypt HTTPS, rewrite requests and responses, map them to local files, and script the rest in JavaScript.
Dashboard
See every request as it happens.
Dashboard lists every connection with the app that made it, the rule it matched, and the policy that carried it. Open one to read its headers, bodies, and timing, then decrypt, rewrite, or replay it.
It also connects to Surge iOS over Wi-Fi or USB, so you can debug an iPhone from your Mac.
Features
Built for the details.
Rule system
Match by domain, IP, GeoIP, ASN, process, and port. Combine with AND, OR, and NOT, and share rule sets locally or remotely.
Proxy protocols
HTTP, HTTPS, SOCKS5, SSH, HTTP/2 CONNECT, MASQUE over HTTP/3, Shadowsocks, Trojan, Snell, and Hysteria 2, with UDP relay and chaining.
Smart Group
An adaptive algorithm scores every policy by real connection quality and switches between them on its own.
DNS
DNS over HTTPS, HTTP/3, QUIC, and TLS. Local mappings with wildcards and per-domain servers. Concurrent queries take the fastest answer.
HTTPS decryption
Inspect HTTPS traffic with MitM. Surge generates the CA certificate and installs it as trusted in one step.
Rewrite and scripting
Rewrite URLs, headers, and bodies, or answer with local data. JavaScript handles everything else, from custom rules to scheduled tasks.
Enhanced Mode
A virtual network interface takes over all traffic, so apps that ignore proxy settings still follow your rules.
Gateway Mode
Use your Mac as the LAN gateway, with built-in DHCP and device management, running at Layer 2 for full speed.
Surge Ponte
Reach your home or office network from anywhere, end-to-end encrypted between your own devices.
WireGuard and Tailscale
Use WireGuard peers and Tailscale networks as proxy policies, accept incoming peers, or advertise an exit node.
Remote Dashboard
Connect Dashboard to Surge iOS over Wi-Fi or USB and inspect the iPhone's requests, cellular included.
AI agents
An MCP server on the HTTP API gives agents like Claude Code the same control as surge-cli.
Try Surge free for 7 days.
Every feature is unlocked during the trial. Licenses are per device and include a year of updates.
Need an earlier version? Download Surge Mac v2 to v5